# @apixies/mcp-server

MCP server for Apixies.io - 50 developer utility APIs as AI tools

- **Type:** MCP server
- **Trust:** 60/100 (B), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 1.4.2
- **Author:** Apixies
- **License:** MIT
- **npm:** @apixies/mcp-server
- **Source:** https://github.com/bicibg/apixies-mcp-server
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

60/100 (B), scored on the package rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 1 day

## Security scan

- **Status:** clean
- **Scanned:** 2026-09-19T20:35:37.055Z
- **Version scanned:** 1.4.2
- **CVEs:** none found by OSV at scan time

## Tools

40 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `check_ssl` — Check the SSL/TLS certificate of a domain. Returns issuer, validity dates, expiry countdown, protocol version, cipher suite, and certificate chain details.
- `check_headers` — Check security headers for a URL. Returns present and missing headers (HSTS, CSP, X-Frame-Options, etc.) with a security grade.
- `inspect_email` — Inspect an email address. Checks format validity, MX records, domain resolution, disposable domain detection, and role-based address detection.
- `parse_user_agent` — Parse a User-Agent string. Detects browser name and version, operating system, device type, and whether it's a bot or crawler.
- `geolocate_ip` — Get geolocation data for an IP address. Returns country, city, region, coordinates, timezone, ISP, and organization.
- `dns_lookup` — Query DNS records for a domain. Returns A, AAAA, MX, TXT, CNAME, NS, SOA, SRV, CAA, PTR records. Optionally filter by record type.
- `dns_propagation` — Check whether a DNS change has propagated: asks Google, Cloudflare, Quad9, OpenDNS and AdGuard the same question at once and reports which resolvers agree, with
- `trace_redirects` — Follow a URL's redirect chain. Shows every hop with HTTP status code, final destination URL, and total number of redirects.
- `extract_meta_tags` — Extract meta tags from a URL. Returns OpenGraph tags, Twitter Card tags, standard meta tags, title, and description.
- `check_link` — Check if a URL is reachable. Returns HTTP status code, response time, content type, and SSL status.
- `parse_robots_txt` — Fetch and parse a domain's robots.txt file. Returns user-agent rules, allowed/disallowed paths, crawl delays, and sitemap URLs.
- `fetch_favicon` — Find favicon URLs for a website. Returns all discovered icons with their URLs, types, and sizes.
- `validate_url` — Validate a URL's format and reachability. Checks syntax, whether it resolves, SSL status, response code, and response time.
- `validate_email_auth` — Validate email authentication records (SPF, DKIM, DMARC) for a domain. Checks if each record exists, is valid, and returns the raw records.
- `check_performance` — Measure website performance. Returns DNS lookup time, TCP connect time, SSL handshake time, TTFB, content download time, and total load time.
- `whois_lookup` — Look up WHOIS registration data for a domain. Returns registrar, creation date, expiration date, name servers, and contact info.
- `decode_jwt` — Decode a JWT token without verification. Returns the header, payload with all claims, signature, and expiry information.
- `analyze_text` — Analyze text content. Returns word count, character count, sentence count, paragraph count, reading time, speaking time, and top word frequency.
- `my_ip` — Get the public IP address of the MCP server. Returns the IP, version (IPv4/IPv6), and whether it's a private address.
- `html_to_pdf` — Convert HTML content to a PDF document. Send HTML markup and receive a PDF. Useful for generating invoices, reports, and documents.
- `markdown_to_html` — Convert Markdown text to HTML. Supports GFM (GitHub Flavored Markdown) including tables, code blocks, and task lists.
- `format_json` — Format, validate, and analyze JSON. Returns formatted output, minified version, and stats (key count, depth, size, type counts).
- `json_to_csv` — Convert a JSON array of objects to CSV format. Handles nested objects and custom delimiters.
- `base64_encode_decode` — Encode or decode a Base64 string. Supports standard and URL-safe Base64.
- `format_phone` — Parse and format a phone number into E.164, national, and international formats. Validates the number and identifies the country.
- `validate_json_schema` — Validate JSON data against a JSON Schema definition (Draft-07+). Returns whether the data is valid and detailed error messages if not.
- `convert_color` — Convert a color between HEX, RGB, and HSL formats. Input any format and get all three representations back.
- `convert_timestamp` — Convert between Unix timestamps and human-readable dates. Returns ISO 8601, RFC 2822, human-readable, and Unix formats with timezone support.
- `encode_decode_url` — URL-encode or decode a string. RFC 3986 compliant encoding for URLs and query strings.
- `generate_hash` — Generate a cryptographic hash of the input text. Supports MD5, SHA-1, SHA-256, SHA-384, SHA-512, CRC32, and Whirlpool.
- `generate_qr` — Generate a QR code image from text or a URL. Returns SVG with customizable size, colors, and margin.
- `generate_uuid` — Generate UUID identifiers. Supports v4 (random) and v7 (time-sorted). Bulk generation up to 50 at once.
- `generate_password` — Generate cryptographically secure random passwords. Configurable length, character sets, and exclusions.
- `generate_lorem` — Generate Lorem Ipsum placeholder text. Choose between words, sentences, or paragraphs with a configurable count.
- `take_screenshot` — Capture a screenshot of any webpage as PNG or JPEG. Configurable viewport size, full-page mode, and image quality.
- `parse_cron` — Parse a cron expression into a human-readable description and calculate next run times. Supports standard 5-field cron and special strings like @daily, @hourly.
- `csv_to_json` — Convert CSV data to a JSON array of objects. Supports custom delimiters, header detection, and quoted fields.
- `html_to_markdown` — Convert HTML content to clean Markdown. Supports GitHub Flavored Markdown with tables and strikethrough. Useful for scraping web content for LLM processing.
- `http_status_lookup` — Look up an HTTP status code. Returns the name, description, common causes, how to fix, and RFC reference. Covers all standard codes plus Cloudflare codes.
- `yaml_to_json` — Convert YAML content to JSON. Supports multi-document YAML, anchors, aliases, and Kubernetes config files.

## Install

**Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for.
**Cautions** (coverage gaps and advisories — never blocking)
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"mcp-server\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"@apixies/mcp-server\"\n      ],\n      \"env\": {\n        \"APIXIES_API_KEY\": \"<YOUR_APIXIES_API_KEY>\"\n      }\n    }\n  }\n}"
```
**Credentials it will ask for** (names only — Forge never holds a value):
- `APIXIES_API_KEY` — Apixies API Key (required)
Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each <YOUR_NAME> in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one.
- This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset.

## Blast radius

Moderate blast radius — holds an api key; runs on your machine.
- Floor 23, ceiling 23 (tier: moderate)
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/%40apixies%2Fmcp-server
- Install plan: https://forgeregistry.com/api/v1/packages/%40apixies%2Fmcp-server/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/%40apixies%2Fmcp-server
- HTML page: https://forgeregistry.com/registry/%40apixies%2Fmcp-server
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.